gpp_maybe Security update for skopeo

SUSE-SLE-Micro-6.0-278

This update for skopeo fixes the following issues: - CVE-2025-22870: golang.org/x/net/proxy: proxy bypass using IPv6 zone IDs (bsc#1238685) - CVE-2025-27144: gopkg.in/square/go-jose.v2,gopkg.in/go-jose/go-jose.v2,github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: Go JOSE's Parsing Vulnerable to Denial of Service (bsc#1237613) - CVE-2024-6104: hashicorp/go-retryablehttp: url might write sensitive information to log file (bsc#1227056) - CVE-2023-45288: golang.org/x/net/http2: close connections when receiving too many headers (bsc#1236483)

• Release Date
  Apr 7 2025
• References
  Bugzilla: 1227056, 1236483, 1237613, 1238685
  CVEs: CVE-2023-45288, CVE-2024-6104, CVE-2025-22870, CVE-2025-27144
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Micro 6.0 aarch64

• Packages
  skopeo
  Container image repository tool

  1.14.4-3.1 lock rpm

SUSE Linux Micro 6.0 s390x

• Packages
  skopeo
  Container image repository tool

  1.14.4-3.1 lock rpm

SUSE Linux Micro 6.0 x86_64

• Packages
  skopeo
  Container image repository tool

  1.14.4-3.1 lock rpm